Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151734.roa
File: AS151734.roa (raw, json)
Hash identifier: m/g3ohMfXvq/5tebe9FiT0O2bBuLjIbxgCDsNfEcxNw=
Subject key identifier: BB:CB:63:48:ED:E6:9E:3C:CE:0B:36:39:7B:20:56:B7:68:53:B2:AF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2131C290AA5C9B3FE8AFFE6E9B62CCBA08E0FE2E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151734.roa
Signing time: Sat 31 May 2025 07:35:53 +0000
ROA not before: Sat 31 May 2025 07:30:53 +0000
ROA not after: Sat 30 May 2026 07:35:53 +0000
asID: 151734
IP address blocks: 2a13:9500:78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:31:c2:90:aa:5c:9b:3f:e8:af:fe:6e:9b:62:cc:ba:08:e0:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 31 07:30:53 2025 GMT
Not After : May 30 07:35:53 2026 GMT
Subject: CN=BBCB6348EDE69E3CCE0B36397B2056B76853B2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:f9:cf:fc:97:e6:4f:a5:33:66:63:a0:ac:
92:3b:68:1b:ad:bd:93:3d:f0:e5:fd:27:07:de:4e:
3c:47:f3:ee:64:2d:b0:82:34:76:25:79:0e:fe:97:
de:6c:d0:31:43:b9:44:68:a6:ea:2b:e1:9c:7b:02:
9e:52:26:04:2e:bf:8d:9e:6c:e0:24:fa:e6:eb:58:
f4:ad:29:66:82:ad:20:af:f3:65:6a:4b:df:9e:9d:
d8:a0:85:67:a5:69:09:6c:c7:d4:0d:a5:99:87:b5:
c2:51:31:e7:5e:64:3f:95:88:22:3a:07:c4:ea:70:
3e:b5:55:23:30:12:7a:bc:a2:f8:12:a6:79:b9:10:
82:51:e2:da:6c:4b:49:83:e2:23:8f:73:a9:60:1f:
c8:d4:05:1d:75:a9:8c:af:7a:77:e6:94:ef:5f:48:
29:1f:7d:81:33:d1:a8:d6:84:01:a6:7f:45:b3:0b:
ae:e9:6a:41:2c:5a:ce:42:e9:29:7b:35:9e:02:bc:
e3:ad:49:b4:48:b3:9e:85:d8:b6:09:e6:a4:85:59:
d4:b6:40:e0:1a:65:08:35:c4:d4:e3:da:40:30:4f:
2f:8e:98:86:e4:e6:0e:9a:62:82:d5:62:b0:f8:c3:
03:c1:a5:a9:ad:4f:c2:67:4b:a1:3f:24:a6:a1:4b:
80:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CB:63:48:ED:E6:9E:3C:CE:0B:36:39:7B:20:56:B7:68:53:B2:AF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS151734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:78::/48
Signature Algorithm: sha256WithRSAEncryption
97:5e:df:3f:a3:cd:a8:fc:e1:f7:27:cf:3b:12:d1:7e:4e:cf:
c2:5b:73:3a:05:6e:73:58:47:83:05:e9:6b:6a:25:4e:31:31:
20:37:86:63:55:fc:5a:c6:75:f0:cb:0d:34:dc:27:53:f8:b8:
02:8c:f2:87:4d:30:ea:2e:c6:b8:b5:fc:78:00:ba:16:3d:86:
79:96:4b:01:c4:f6:04:07:a1:52:7c:a7:67:42:26:79:18:0c:
0a:f3:3a:03:cd:fc:11:cc:7c:e2:37:de:f1:09:be:3f:8d:2e:
7c:62:19:37:2d:b7:4d:fc:87:d2:7c:c2:f4:93:fd:d2:ed:cc:
0d:41:fa:8a:e6:6a:6d:a4:01:65:36:40:87:70:27:46:6f:8b:
b7:71:8e:82:bc:0c:23:df:29:1b:1a:52:dd:54:7e:80:32:cc:
3a:d2:97:64:f9:b4:a7:87:4c:c2:74:4c:e6:6c:ab:a8:37:a7:
60:79:1e:ed:43:e0:c0:63:e2:6c:ed:6b:e2:c6:a2:7b:70:e3:
43:fd:53:99:be:a7:32:9c:0f:d6:2d:3b:95:6e:a9:18:15:fc:
06:36:26:1f:5f:ca:96:b5:8d:07:99:7b:44:1b:1f:60:11:0c:
56:79:f1:49:74:c5:2d:94:4d:69:5f:fe:34:8d:54:7a:bc:4f:
b9:7a:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:57:50 2025 by rpki-client